Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/38312e32322e33372e302f32342d3234203d3e2030.roa
File:                     38312e32322e33372e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          CjeFPinfP0h8w9rMUg3W2d1ucMeuIQRcHx4toqqz3Z0=
Subject key identifier:   E4:7F:0E:D7:17:13:25:84:AE:CF:AB:9A:E9:DC:0A:06:CB:D3:89:12
Certificate issuer:       /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial:       77055AC621DDF71DA206921EAE6DB28DB897A013
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/8/38312e32322e33372e302f32342d3234203d3e2030.roa
Signing time:             Fri 03 Mar 2023 16:07:57 +0000
ROA not before:           Fri 03 Mar 2023 16:02:57 +0000
ROA not after:            Fri 01 Mar 2024 16:07:57 +0000
asID:                     0
IP address blocks:        81.22.37.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:05:5a:c6:21:dd:f7:1d:a2:06:92:1e:ae:6d:b2:8d:b8:97:a0:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
        Validity
            Not Before: Mar  3 16:02:57 2023 GMT
            Not After : Mar  1 16:07:57 2024 GMT
        Subject: CN=E47F0ED717132584AECFAB9AE9DC0A06CBD38912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ec:a2:0d:ca:82:3f:b0:30:2d:cf:db:e6:f6:
                    bb:5e:10:3d:7a:4b:41:8d:0e:46:99:dc:dd:52:ee:
                    28:0c:a0:0b:84:c9:6c:bd:42:bc:ab:42:92:93:3a:
                    fa:22:d0:7e:65:3b:36:8f:25:45:b5:f8:34:07:77:
                    27:e2:21:b0:7e:04:97:d9:3b:74:80:fd:c6:ab:72:
                    dc:a9:be:70:69:ba:4f:65:d2:f9:f8:3a:33:0b:ef:
                    35:e0:e2:fe:70:2c:57:3f:1f:2b:52:d8:2c:b0:6d:
                    34:1c:4c:2b:36:ff:79:2e:ed:f0:19:ec:df:59:5b:
                    85:60:28:05:90:08:e0:37:cf:fa:53:20:ba:3d:06:
                    4a:a6:ff:7d:b7:2a:40:73:03:95:6d:52:97:6b:42:
                    64:a4:3a:9d:05:80:80:f3:90:d7:67:b7:de:96:47:
                    b7:b8:1b:34:90:6b:94:08:b1:7f:db:5e:cd:72:8c:
                    ee:71:a6:16:6e:87:11:54:cf:e3:8e:c4:0c:a2:ec:
                    ec:92:9e:3d:8b:8f:be:7a:5b:23:a4:44:63:cc:ba:
                    14:47:3d:0d:e2:b7:c3:e8:71:f6:36:70:4b:ae:2e:
                    1b:24:c0:87:4a:fb:90:f6:b3:02:cb:ad:92:12:a5:
                    13:25:26:4f:eb:00:f2:9c:fe:30:e4:14:a2:9f:0f:
                    d0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:7F:0E:D7:17:13:25:84:AE:CF:AB:9A:E9:DC:0A:06:CB:D3:89:12
            X509v3 Authority Key Identifier:
                keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/38312e32322e33372e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.22.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:1f:a2:2a:14:81:5a:91:48:bb:1e:c4:fd:e2:c6:fd:11:b3:
         f5:bc:7d:7f:fa:5b:47:3d:3c:8e:76:1e:a2:8d:8f:30:d3:ca:
         47:84:81:23:63:96:3f:b1:d6:b0:e6:aa:08:2c:e7:07:97:e3:
         d8:81:d1:58:2a:a8:01:85:69:f6:73:ac:65:f5:5b:3e:59:81:
         df:c6:02:85:7f:75:a8:a3:c1:6a:8f:da:63:88:ed:05:36:51:
         0d:ad:db:5f:36:bf:ee:ea:5e:cc:af:a3:4a:ed:6e:0e:ab:d1:
         72:62:8b:1a:d5:36:f7:f5:bc:b8:37:30:8a:2b:fc:f1:98:26:
         55:70:84:72:c3:56:de:70:ab:b3:55:5a:35:8d:d4:07:4f:a0:
         ad:6a:0f:09:f6:d6:12:0f:13:c5:d3:71:22:e4:09:ac:72:e0:
         cf:68:33:c0:4a:8e:17:b1:cc:39:5e:bc:43:04:ab:17:d6:ba:
         21:83:b0:a3:6b:58:9c:4d:47:4c:26:8c:6c:46:60:7b:f1:83:
         f5:17:61:a3:96:f0:e4:f6:c1:fa:2b:f1:5a:7c:a5:38:24:df:
         09:fa:58:5b:bf:d0:54:47:6d:cf:98:0d:52:cb:45:f0:9b:c1:
         cd:d4:57:3b:17:25:39:c7:a1:7f:dd:5b:51:95:f0:db:34:f5:
         d4:ef:c5:3c
-----BEGIN CERTIFICATE-----
MIIE2jCCA8KgAwIBAgIUdwVaxiHd9x2iBpIerm2yjbiXoBMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMWU3OTNiNWMxMjM5MjMxZTA4ZGVkZDZmYjgwNjA3MzJj
ZDA2M2Y0ZDAeFw0yMzAzMDMxNjAyNTdaFw0yNDAzMDExNjA3NTdaMDMxMTAvBgNV
BAMTKEU0N0YwRUQ3MTcxMzI1ODRBRUNGQUI5QUU5REMwQTA2Q0JEMzg5MTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi7KINyoI/sDAtz9vm9rteED16
S0GNDkaZ3N1S7igMoAuEyWy9QryrQpKTOvoi0H5lOzaPJUW1+DQHdyfiIbB+BJfZ
O3SA/carctypvnBpuk9l0vn4OjML7zXg4v5wLFc/HytS2CywbTQcTCs2/3ku7fAZ
7N9ZW4VgKAWQCOA3z/pTILo9Bkqm/323KkBzA5VtUpdrQmSkOp0FgIDzkNdnt96W
R7e4GzSQa5QIsX/bXs1yjO5xphZuhxFUz+OOxAyi7OySnj2Lj756WyOkRGPMuhRH
PQ3it8PocfY2cEuuLhskwIdK+5D2swLLrZISpRMlJk/rAPKc/jDkFKKfD9D/AgMB
AAGjggHkMIIB4DAdBgNVHQ4EFgQU5H8O1xcTJYSuz6ua6dwKBsvTiRIwHwYDVR0j
BBgwFoAUHnk7XBI5Ix4I3t1vuAYHMs0GP00wDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzgvMUU3OTNCNUMxMjM5MjMxRTA4REVERDZGQjgwNjA3MzJD
RDA2M0Y0RC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0huazdYQkk1SXg0STN0
MXZ1QVlITXMwR1AwMC5jZXIwfAYIKwYBBQUHAQsEcDBuMGwGCCsGAQUFBzALhmBy
c3luYzovL3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC84
LzM4MzEyZTMyMzIyZTMzMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAFEWJTANBgkqhkiG9w0BAQsFAAOCAQEAAh+iKhSBWpFIux7E/eLG/RGz
9bx9f/pbRz08jnYeoo2PMNPKR4SBI2OWP7HWsOaqCCznB5fj2IHRWCqoAYVp9nOs
ZfVbPlmB38YChX91qKPBao/aY4jtBTZRDa3bXza/7upezK+jSu1uDqvRcmKLGtU2
9/W8uDcwiiv88ZgmVXCEcsNW3nCrs1VaNY3UB0+grWoPCfbWEg8TxdNxIuQJrHLg
z2gzwEqOF7HMOV68QwSrF9a6IYOwo2tYnE1HTCaMbEZge/GD9Rdho5bw5PbB+ivx
WnylOCTfCfpYW7/QVEdtz5gNUstF8JvBzdRXOxclOcehf91bUZXw2zT11O/FPA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:58 2024 by rpki-client on console-ams.rpki-client.org